Lucene search
+L

446 matches found

Kitploit
Kitploit
•added 2026/09/29 5:47 a.m.•8 views

CVE-2021-40444

EXP Ladon CVE-2021-40444 Office Vulnerability Exploitation Vulnerability Overview On September 8th Beijing time, NSFOCUS CERT monitored that Microsoft released a security advisory disclosing the Microsoft MSHTML remote code execution vulnerability. Attackers can craft malicious ActiveX controls f...

8.8CVSS7.9AI score0.9745EPSS
SaveExploits38
Kitploit
Kitploit
•added 2026/09/29 3:26 a.m.•11 views

CVE-2024-4947

CVE-2024-4947 A in-the-wild V8 type confusion bug. This repository contains Analysis and PoCs to escalate this vulnerability to have the same exploit pattern as CVE-2024-12695, Object Hash Reassign. AddressOf / FakeObject Primitives constructed by using the type confusion to assign object hash to...

9.6CVSS7.6AI score0.15236EPSS
SaveExploits3References1
Kitploit
Kitploit
•added 2026/09/29 2:00 a.m.•11 views

CVE-2022-22620

CVE-2022-22620 CVE-2022-22620: Use-after-free in Safari https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2022/CVE-2022-22620.html...

8.8CVSS7.5AI score0.16342EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/29 1:18 a.m.•13 views

CVE-2023-38831-RaRCE

RaRCE, Exploit generator for CVE-2023-38831 This is an easy to install and easy to use, versatile exploit generator for CVE-2023-38831, a vulnerability that affects WinRAR versions before 6.23. RARLabs WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a...

7.8CVSS7.6AI score0.99815EPSS
SaveExploits49References4
Kitploit
Kitploit
•added 2026/09/29 12:12 a.m.•16 views

CVE-2023-21674

First in-the-wild 0-day of 2023 🔥 CVE-2023-21674 is a vulnerability in Windows Advanced Local Procedure Call ALPC that could lead to a browser sandbox escape and allow attackers to gain SYSTEM privileges discovered by Avast root@kitploit: kd !analyze -v Bugcheck Analysis PAGEFAULTINNONPAGEDAREA 5...

8.8CVSS7.9AI score0.40987EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/28 9:21 p.m.•15 views

0days-in-the-wild

0-days explotados en la naturaleza Este repositorio es una referencia de documentos sobre vulnerabilidades de día cero detectadas como explotadas en la naturaleza. Incluye tanto análisis de causa raíz RCA para cada exploit de día cero como una tabla que rastrea cada día cero. Estos documentos est...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/28 8:09 p.m.•16 views

n-days

n-days A collection of POCs & writeups for iOS vulnerabilities either discovered by me, binary diffed from In-The-Wild updates or just cool non-public bugs. CVE| Patched In| Link| Reported by me| Exploited ITW| Description ---|---|---|---|---|--- CVE-2021-1757| iOS 14.4| poc - info| ✖️| ✖️| Kernel...

9.3CVSS7.6AI score0.28839EPSS
SaveExploits0References8
Kitploit
Kitploit
•added 2026/09/28 7:05 p.m.•13 views

CVE-2025-11371

CVE-2025-11371 In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild. This issue impacts Gladinet...

7.5CVSS6.8AI score0.92137EPSS
SaveExploits4References1
Kitploit
Kitploit
•added 2026/09/28 6:54 p.m.•11 views

CVE-2023-38831

CVE-2023-38831 WinRAR RARLabs WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive. The issue occurs because a ZIP archive may include a benign file such as an ordinary .JPG file and also a folder that has the same name as t...

7.8CVSS7.7AI score0.99815EPSS
SaveExploits49
Kitploit
Kitploit
•added 2026/09/28 5:08 p.m.•11 views

CVE-2023-38831-PoC

CVE-2023-38831 PoC This repository is just a Proof-of-Concept for CVE-2023-38831 Zero-Day vulnerability in WinRAR RARLabs WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive. The issue occurs because a ZIP archive may inclu...

7.8CVSS7.6AI score0.99815EPSS
SaveExploits49
Kitploit
Kitploit
•added 2026/09/28 3:00 p.m.•15 views

cve-2019-1458_POC

CVE-2019-1458: Going from 'in the wild report' to POC Intro In December Kaspersky published a blogpost about 0day exploit used in the wild. It piqued my interest because although they described how the exploit was working, they didn't provide any POC in their analysis. This is why I decided to tr...

7.8CVSS7.8AI score0.74263EPSS
SaveExploits11
Kitploit
Kitploit
•added 2026/09/28 2:58 p.m.•7 views

CVE-2019-1367

0x00 Background Internet Explorer is a web browser developed by Microsoft. It has a massive user base. On September 23, Microsoft released an emergency security update to fix a remote code execution vulnerability affecting Internet Explorer. Discovered by Google's Threat Analysis Group, the...

7.6CVSS7.9AI score0.52449EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/28 12:15 p.m.•13 views

cve-2017-0199

cve-2017-0199 Sample file used in the wild https://twitter.com/SyFi2k...

9.3CVSS7.9AI score0.99497EPSS
SaveExploits30
Kitploit
Kitploit
•added 2026/09/28 11:43 a.m.•16 views

CVE-2021-30632

CVE-2021-30632 Chrome V8 RCE Exploit for Windows Tested Version : Chrome 91, 92, 93.0.4577.63 Demo reference Chrome in-the-wild bug analysis: CVE-2021-30632 https://securitylab.github.com/research/inthewildchromecve202130632/ JS POC sample...

8.8CVSS8.1AI score0.6319EPSS
SaveExploits3References2
Kitploit
Kitploit
•added 2026/09/28 10:29 a.m.•12 views

cve-2023-5217-poc

CVE-2023-5217: libvpx VP8 Encoding Heap Overflow PoC CVE-2023-5217 is an in-the-wild exploited libvpx vulnerability that was found by Clément Lecigne of Google's Threat Analysis Group to be targeting Chrome. This repo shows how to trigger CVE-2023-5217 in the browser using the WebCodecs and...

8.8CVSS8.4AI score0.49013EPSS
SaveExploits3References5
Kitploit
Kitploit
•added 2026/09/28 7:10 a.m.•13 views

CVE-2022-47986

CVE-2022-47986 Why This vulnerability is exploited in the wild. IceFire use this vulnerability to deploy the ransomware on targeted systems, i would like to help SOC/Blue teams to identify impacted systems and Pentesters/Red teams to exploit and report it. Description I propose pure python and ru...

9.8CVSS8.3AI score0.99968EPSS
SaveExploits5
Kitploit
Kitploit
•added 2026/09/28 5:42 a.m.•9 views

CVE-2023-38831

CVE-2023-38831 - RARLAB WinRAR Code Execution Vulnerability ⚠️ For educational and authorized security research purposes only Original Exploit Authors Very grateful to the original PoC author b1tg and Group-IB Threat Intelligence Description RARLabs WinRAR before 6.23 allows attackers to execute...

7.8CVSS7.6AI score0.99815EPSS
SaveExploits49References1
Kitploit
Kitploit
•added 2026/09/27 5:58 p.m.•11 views

CVE-2022-26134-LAB

CVE-2022-26134-LAB Confluence Server and Confluence Data Center include a significant unauthenticated remote code execution vulnerability identified as CVE-2022-26134, according to a security advisory released by Atlassian on June 2, 2022. The vulnerability was unpatched when it was published on...

9.8CVSS8.8AI score0.99999EPSS
SaveExploits77
Kitploit
Kitploit
•added 2026/09/27 2:28 p.m.•10 views

CVE-2025-66478

CVE-2025-66478 - Analysis of Real Attack Logs for Next.js Server Actions RCE Vulnerability Overview This project collects real attack logs recorded from a Next.js 15.1.2 application running in a Docker container exposed to the internet. These logs show how the CVE-2025-66478 vulnerability is bein...

7.8AI score
SaveExploits112References2
Kitploit
Kitploit
•added 2026/09/27 11:22 a.m.•14 views

CVE-2016-7255

CVE-2016-7255 Proof Of Concept privilege escalation exploit using CVE-2016-7255, aims to mirror the functionality of the exploit found in the wild as described by Trend Micro. You may want to fix the recovery before using this anywhere important. Some code taken from tinysec's original crash PoC...

7.8CVSS7.4AI score0.80968EPSS
SaveExploits24References1
Rows per page
Query Builder